last executing test programs: 7.250074418s ago: executing program 2 (id=162): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x9}, {0xd, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000810) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 6.549966127s ago: executing program 2 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0xfdef) 5.051543686s ago: executing program 2 (id=171): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) flistxattr(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 3.855195018s ago: executing program 4 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000004c0)=0x1, 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x2a, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x5, 0x2, 0x1}, {0x2, 0x4, 0x8, 0x3}, {0x0, 0x1, 0x2, 0x2}, {0x4, 0x2, 0x10, 0x16}, {0x2, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x6, 0x3}, {0x2, 0x4, 0x2, 0x9}, {0x4, 0x5, 0x1, 0x9}], 0x10, 0xfffffff9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, 0xffffffffffffffff, 0x1b, 0x4004, r5}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'vxcan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) write$ppp(r7, &(0x7f0000000180)='\x00\x00', 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r4, 0xa) listen(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8080, &(0x7f00000000c0)=ANY=[@ANYBLOB='dots,nodots,dots,dmask=00000000000010000000011,nodots,nodots,nodots,\x00'], 0x1, 0x209, &(0x7f0000000680)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='0', 0x1) 3.594321594s ago: executing program 2 (id=176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x80) 2.589231021s ago: executing program 1 (id=180): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) 2.490736424s ago: executing program 3 (id=182): prctl$PR_PAC_RESET_KEYS(0x36, 0x9) 2.489553054s ago: executing program 4 (id=183): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240), r1, 0x0, 0x1, 0x4}}, 0x20) 2.262524549s ago: executing program 3 (id=184): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@euid_gt}, {@hash}, {@hash}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.26230604s ago: executing program 4 (id=185): r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='event', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) write(r2, &(0x7f0000000000)='3', 0x4e) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000780)={0x3, 0x0, @c}, 0x29, r0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000009c0)="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", 0x41d, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.262224689s ago: executing program 1 (id=186): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) 2.157753812s ago: executing program 2 (id=187): socket(0xa, 0x3, 0xff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) get_robust_list(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feff", 0xa918, 0xffffffffffffffff) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e410"], 0xdd12}], 0x1, 0x0, 0x0, 0x14048802}, 0x40488d0) close_range(r0, 0xffffffffffffffff, 0x0) 2.154292532s ago: executing program 0 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r0) 2.026158386s ago: executing program 1 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x1, 0x2, 0x303, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4) 1.678469285s ago: executing program 0 (id=190): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200000f0002000000200000", 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 1.585372698s ago: executing program 1 (id=191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0xfffffffffffffffe, 0x40000100080004, 0x6, 0x9, 0x8, 0x4f2a, 0x0, 0x3}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="00032900330010200800ffffffffffff080211000001080211000000691c0b462f0001000106a00be0486c96dd4b7655fe72858be1c9821c74da1f11fa49a6c07004fd0cd4ec70c0b35838ac0194eeb9b210ffb73a7887fc0b171eeab6da7527ed30b1234f719b2ff76af82356d1dfe0172fa08d9cd889ff18dd6bd1d43d988866966648c58ecad9bcddfe0e7838520ee25c693bc04628f665c4ff12328681ab5ca2a8d422f756f7273fc075597fdafe00672e50a6ba27478acc8645b5b77037f4f92e3b2815eb0500ef3573af4abb38a156b8f2cbead33cfed686f0c6942e8ca10a6ce338c32b04006c0004008700"/250], 0x100}, 0x1, 0x0, 0x0, 0x8010}, 0x24040895) write(r1, &(0x7f0000000000)='7', 0x1) fcntl$lock(r0, 0x25, &(0x7f0000000200)={0x1, 0x1, 0x7, 0xf34}) 1.537902929s ago: executing program 3 (id=192): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='+^\x00', 0x3) 1.050568802s ago: executing program 3 (id=193): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000078}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) 1.007198683s ago: executing program 4 (id=194): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7040010000000f000000", @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 977.142503ms ago: executing program 0 (id=195): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x1d851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @random="fa45a86096b6"}, 0x14) 846.574917ms ago: executing program 3 (id=196): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x39d, &(0x7f00000013c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x2, 0x8ffff) 613.271433ms ago: executing program 2 (id=197): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x80) 542.208345ms ago: executing program 0 (id=198): socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 505.174726ms ago: executing program 1 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468") 434.600978ms ago: executing program 3 (id=200): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x143042, 0x58) write(r0, &(0x7f0000000740)='3', 0x1) 316.705071ms ago: executing program 0 (id=201): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000280), 0x4) 294.663912ms ago: executing program 4 (id=202): r0 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 14.517239ms ago: executing program 1 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = dup(r2) ioctl$TCXONC(r4, 0x540a, 0x3) 8.51938ms ago: executing program 0 (id=204): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b2", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64=r0], 0x18, 0xc00c815}}], 0x1, 0x24000845) 0s ago: executing program 4 (id=205): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x97) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 76.346300][ T4260] cgroup: Unknown subsys name 'net' [ 76.452490][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.027764][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.516567][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.517725][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.528556][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.544378][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.552346][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.554339][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.568567][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.570138][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.583554][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.586748][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.597918][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.598375][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.626220][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.634615][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.642800][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.650864][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.662206][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.670275][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.684381][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.701670][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.710352][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.718776][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.734508][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.742597][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.784281][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.797352][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.815493][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.823831][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.844177][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.851965][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.195424][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.320692][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 80.368784][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 80.382259][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 80.490766][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 80.524351][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.532545][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.544209][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.564887][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.572486][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.583939][ T4283] device bridge_slave_0 entered promiscuous mode [ 80.598748][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.606092][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.614703][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.642359][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.649573][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.657798][ T4283] device bridge_slave_1 entered promiscuous mode [ 80.737676][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.749860][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.758248][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.766759][ T4278] device bridge_slave_0 entered promiscuous mode [ 80.774994][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.782447][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.790972][ T4272] device bridge_slave_0 entered promiscuous mode [ 80.803488][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.811073][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.819768][ T4272] device bridge_slave_1 entered promiscuous mode [ 80.829149][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.842546][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.852212][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.863750][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.871978][ T4278] device bridge_slave_1 entered promiscuous mode [ 80.921957][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.963116][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.970401][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.978799][ T4285] device bridge_slave_0 entered promiscuous mode [ 80.987968][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.995385][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.003414][ T4285] device bridge_slave_1 entered promiscuous mode [ 81.019203][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.030714][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.049153][ T4283] team0: Port device team_slave_0 added [ 81.058181][ T4283] team0: Port device team_slave_1 added [ 81.072602][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.099637][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.134286][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.153822][ T4273] team0: Port device team_slave_0 added [ 81.184739][ T4278] team0: Port device team_slave_0 added [ 81.193728][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.205041][ T4273] team0: Port device team_slave_1 added [ 81.222077][ T4272] team0: Port device team_slave_0 added [ 81.240438][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.247616][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.274563][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.288573][ T4278] team0: Port device team_slave_1 added [ 81.302539][ T4272] team0: Port device team_slave_1 added [ 81.316521][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.323549][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.349695][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.370124][ T4285] team0: Port device team_slave_0 added [ 81.383805][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.391198][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.424066][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.447508][ T4285] team0: Port device team_slave_1 added [ 81.478341][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.487023][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.514126][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.533089][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.540735][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.567393][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.586929][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.594406][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.621635][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.650841][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.657046][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 81.658243][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 81.671345][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.698039][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.710008][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.717527][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.745280][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 81.752259][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.764496][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.771787][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.799011][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.814358][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 81.837220][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.844507][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.874238][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.894221][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 81.905169][ T4283] device hsr_slave_0 entered promiscuous mode [ 81.916002][ T4283] device hsr_slave_1 entered promiscuous mode [ 81.926603][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.937405][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.945064][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.953307][ T4273] Cannot create hsr debugfs directory [ 82.029574][ T4272] device hsr_slave_0 entered promiscuous mode [ 82.037065][ T4272] device hsr_slave_1 entered promiscuous mode [ 82.043862][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.051718][ T4272] Cannot create hsr debugfs directory [ 82.068403][ T4278] device hsr_slave_0 entered promiscuous mode [ 82.076953][ T4278] device hsr_slave_1 entered promiscuous mode [ 82.086999][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.095089][ T4278] Cannot create hsr debugfs directory [ 82.121227][ T4285] device hsr_slave_0 entered promiscuous mode [ 82.129064][ T4285] device hsr_slave_1 entered promiscuous mode [ 82.136465][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.145924][ T4285] Cannot create hsr debugfs directory [ 82.549333][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.560564][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.573598][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.591510][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.637634][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.659340][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.669213][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.697147][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.760590][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.792683][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.817786][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.839888][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.902117][ T4278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.954709][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.961980][ T4278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.990557][ T4278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.002617][ T4278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.023924][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.062282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.073812][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.092422][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.111634][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.128800][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.149165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.160477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.170259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.182561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.193160][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.201020][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.210628][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.227366][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.246980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.257784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.268467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.278101][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.285588][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.294924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.305139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.319106][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.357406][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.371336][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.380279][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.388085][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.398442][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.408524][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.418292][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.427872][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.437212][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.444507][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.478373][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.487844][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.505542][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.516833][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.526203][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.538871][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.551394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.562285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.594834][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.606624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.620353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.629928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.639248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.648849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.660151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.669658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.693130][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.706158][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.717462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.731029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.739261][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 83.739281][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 83.750092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.760568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.777419][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.786940][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.808579][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.817510][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.825456][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 83.862511][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.879315][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.889912][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.897160][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.905206][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 83.919464][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.928846][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.943724][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.951163][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.964625][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.974698][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 83.987706][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.056244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.070818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.090304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.119370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.143800][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.161061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.186071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.195000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.215626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.235204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.290252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.301813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.317834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.345190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.353788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.375259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.394940][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.402460][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.423837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.433686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.448295][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.455577][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.466987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.478157][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.505457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.513739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.571356][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.604735][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.622527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.632413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.646261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.653853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.666786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.675892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.684770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.693389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.703519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.712935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.751430][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.769806][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.786384][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.799013][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.818347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.827418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.847664][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.865848][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.907577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.923526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.941238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.952033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.967429][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.974748][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.989294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.034643][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.043890][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.065183][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.072499][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.100498][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.119204][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.154891][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.198219][ T4273] device veth0_vlan entered promiscuous mode [ 85.246748][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.268664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.285182][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.303437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.315206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.342696][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.358175][ T4273] device veth1_vlan entered promiscuous mode [ 85.420004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.436413][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.455300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.474532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.490426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.504454][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.525093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.532671][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.580175][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.627744][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.657055][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.673007][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.707570][ T4273] device veth0_macvtap entered promiscuous mode [ 85.749120][ T4273] device veth1_macvtap entered promiscuous mode [ 85.787379][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.807002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.822963][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 85.828505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.832609][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 85.856644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.879584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.894918][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 85.931862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.953028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.974740][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 85.991646][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.024599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.044945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.054336][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 86.100551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.148866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.182909][ T4272] device veth0_vlan entered promiscuous mode [ 86.207761][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.226831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.237596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.265630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.275327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.284906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.300419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.330954][ T4272] device veth1_vlan entered promiscuous mode [ 86.342455][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.364360][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.373434][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383279][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.401835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.412239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.421574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.438320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.446856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.487233][ T4278] device veth0_vlan entered promiscuous mode [ 86.499847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.507764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.516697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.526932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.556410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.566043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.579676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.589017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.616787][ T4272] device veth0_macvtap entered promiscuous mode [ 86.629989][ T4272] device veth1_macvtap entered promiscuous mode [ 86.645577][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.653301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.663715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.673544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.682163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.693004][ T4278] device veth1_vlan entered promiscuous mode [ 86.715874][ T4283] device veth0_vlan entered promiscuous mode [ 86.747802][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.760154][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.776120][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.791261][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.802273][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.814758][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.840790][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.851363][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.865359][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.877378][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.902205][ T4283] device veth1_vlan entered promiscuous mode [ 86.915116][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.925359][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.935195][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.944353][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.992501][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.012643][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.022970][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.032792][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.052589][ T4278] device veth0_macvtap entered promiscuous mode [ 87.092165][ T4285] device veth0_vlan entered promiscuous mode [ 87.103310][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.113477][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.122914][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.131793][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.147888][ T4278] device veth1_macvtap entered promiscuous mode [ 87.186153][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.196624][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.205156][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.216163][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.231261][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.240655][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.260020][ T4285] device veth1_vlan entered promiscuous mode [ 87.290464][ T4283] device veth0_macvtap entered promiscuous mode [ 87.296107][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.313074][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.338127][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.351080][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.361475][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.372282][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.384846][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.414594][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.423139][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.433508][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.443783][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.453732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.463664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.482278][ T4283] device veth1_macvtap entered promiscuous mode [ 87.502685][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.525109][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.535131][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.549230][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.560256][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.571001][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.585850][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.616529][ T4285] device veth0_macvtap entered promiscuous mode [ 87.628940][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.642946][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.652775][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.672407][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.686982][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.701166][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.713525][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.734928][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.742819][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.759901][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.789424][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.802083][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.823060][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.839459][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.851060][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.865768][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.889087][ T4285] device veth1_macvtap entered promiscuous mode [ 87.889290][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.913450][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 87.921887][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 87.935898][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.945273][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.961464][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.970484][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.974651][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 87.993731][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.003448][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.028337][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.046650][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.056802][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 88.067041][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.093589][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.106126][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.121784][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.134119][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 88.138876][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.175144][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.188182][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.200987][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216743][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.229459][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.241244][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.298391][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.312004][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.323824][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.335150][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.347137][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.358070][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.368414][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.380289][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.392893][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.414998][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.426900][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.437244][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.449812][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.461865][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.473312][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.483432][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.495391][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.507746][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.515953][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.526114][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.553241][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.571751][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.592888][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.618355][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.634416][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.644984][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.653732][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.666293][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.695524][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.756173][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.779145][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.815062][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.882149][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.895118][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.917928][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.951302][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.969629][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.005723][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.050402][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.074564][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.128554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.169862][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.179873][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.189799][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.232562][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.245216][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.252989][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.503119][ T4375] loop1: detected capacity change from 0 to 2048 [ 89.605632][ T4375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.851144][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 91.774340][ T4388] sched: RT throttling activated [ 92.783004][ T128] cfg80211: failed to load regulatory.db [ 93.579445][ T4408] IPVS: Scheduler module ip_vs_mh not found [ 93.879399][ T4425] device ip6gretap0 entered promiscuous mode [ 94.151800][ T4426] device-mapper: ioctl: Invalid ioctl structure: name c, dev f800 [ 94.950830][ T4432] loop4: detected capacity change from 0 to 512 [ 95.298169][ T4432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.103497][ T4453] FAULT_INJECTION: forcing a failure. [ 96.103497][ T4453] name failslab, interval 1, probability 0, space 0, times 1 [ 96.140810][ T4453] CPU: 0 PID: 4453 Comm: syz.4.36 Not tainted syzkaller #0 [ 96.148107][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.158235][ T4453] Call Trace: [ 96.161562][ T4453] [ 96.164549][ T4453] dump_stack_lvl+0x188/0x24e [ 96.169431][ T4453] ? show_regs_print_info+0x12/0x12 [ 96.174686][ T4453] ? load_image+0x410/0x410 [ 96.179273][ T4453] ? __lock_acquire+0x7ea0/0x7ea0 [ 96.184387][ T4453] should_fail_ex+0x390/0x4c0 [ 96.189231][ T4453] should_failslab+0x5/0x20 [ 96.193782][ T4453] slab_pre_alloc_hook+0x59/0x300 [ 96.198971][ T4453] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 96.205089][ T4453] kmem_cache_alloc_lru+0x49/0x2e0 [ 96.210348][ T4453] ? bdev_alloc_inode+0x24/0x60 [ 96.215480][ T4453] ? _raw_spin_unlock+0x40/0x40 [ 96.220627][ T4453] bdev_alloc_inode+0x24/0x60 [ 96.225374][ T4453] ? bd_init_fs_context+0xa0/0xa0 [ 96.230488][ T4453] new_inode_pseudo+0x5f/0x1c0 [ 96.235292][ T4453] new_inode+0x25/0x1d0 [ 96.239481][ T4453] ? init_timer_key+0x178/0x320 [ 96.244364][ T4453] bdev_alloc+0x20/0x270 [ 96.248644][ T4453] __alloc_disk_node+0x127/0x570 [ 96.253619][ T4453] __blk_alloc_disk+0x2c/0x80 [ 96.258319][ T4453] dm_create+0x46b/0xf90 [ 96.262682][ T4453] dev_create+0x12e/0x2c0 [ 96.267061][ T4453] ? list_devices+0x820/0x820 [ 96.271783][ T4453] ? __might_fault+0xc2/0x120 [ 96.276509][ T4453] ? __might_fault+0xa6/0x120 [ 96.281439][ T4453] dm_ctl_ioctl+0xa9c/0xec0 [ 96.286364][ T4453] ? list_devices+0x820/0x820 [ 96.291279][ T4453] ? dm_poll+0x120/0x120 [ 96.295598][ T4453] ? bpf_lsm_file_ioctl+0x5/0x10 [ 96.300583][ T4453] ? security_file_ioctl+0x7c/0xa0 [ 96.305816][ T4453] ? dm_poll+0x120/0x120 [ 96.310269][ T4453] __se_sys_ioctl+0xfa/0x170 [ 96.314998][ T4453] do_syscall_64+0x4c/0xa0 [ 96.319455][ T4453] ? clear_bhb_loop+0x60/0xb0 [ 96.324167][ T4453] ? clear_bhb_loop+0x60/0xb0 [ 96.328990][ T4453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.334918][ T4453] RIP: 0033:0x7f53e479e159 [ 96.339366][ T4453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.359186][ T4453] RSP: 002b:00007f53e569c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.367645][ T4453] RAX: ffffffffffffffda RBX: 00007f53e4a25fa0 RCX: 00007f53e479e159 [ 96.375647][ T4453] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 96.384098][ T4453] RBP: 00007f53e483506b R08: 0000000000000000 R09: 0000000000000000 [ 96.392110][ T4453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.400114][ T4453] R13: 00007f53e4a26038 R14: 00007f53e4a25fa0 R15: 00007ffd8080b3e8 [ 96.408139][ T4453] [ 96.707761][ T4459] loop1: detected capacity change from 0 to 512 [ 96.731476][ T4459] EXT4-fs: Ignoring removed nobh option [ 96.853224][ T4459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.880016][ T4459] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.081559][ T4459] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.39: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 97.279921][ T4475] loop2: detected capacity change from 0 to 1024 [ 97.555463][ T4475] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 97.589686][ T4475] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 97.597957][ T4475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.661571][ T4475] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 97.848442][ T4476] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.39: corrupted inode contents [ 97.879211][ T4476] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #2: comm syz.1.39: mark_inode_dirty error [ 97.893214][ T4476] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.39: corrupted inode contents [ 97.915363][ T4476] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.39: mark_inode_dirty error [ 98.087656][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 98.132036][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 98.212579][ T4488] Zero length message leads to an empty skb [ 98.804322][ T4513] capability: warning: `syz.4.49' uses 32-bit capabilities (legacy support in use) [ 98.850013][ T4513] loop4: detected capacity change from 0 to 512 [ 98.862911][ T4513] ======================================================= [ 98.862911][ T4513] WARNING: The mand mount option has been deprecated and [ 98.862911][ T4513] and is ignored by this kernel. Remove the mand [ 98.862911][ T4513] option from the mount to silence this warning. [ 98.862911][ T4513] ======================================================= [ 101.451570][ T4513] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 102.093663][ T4525] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 102.235907][ T4536] loop2: detected capacity change from 0 to 128 [ 102.305743][ T4539] tap0: tun_chr_ioctl cmd 1074025672 [ 102.311141][ T4539] tap0: ignored: set checksum disabled [ 103.982397][ T4567] device syzkaller0 entered promiscuous mode [ 104.043160][ T4567] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 104.102619][ T4569] ip_tables: iptables: counters copy to user failed while replacing table [ 104.246313][ T4564] device gretap0 entered promiscuous mode [ 104.537211][ T4586] syz.3.69 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 105.712936][ T4595] loop1: detected capacity change from 0 to 2048 [ 105.721249][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.729826][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.748534][ T4600] loop2: detected capacity change from 0 to 764 [ 105.772176][ T4602] loop3: detected capacity change from 0 to 512 [ 105.817928][ T4595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.836604][ T4600] rock: directory entry would overflow storage [ 105.873070][ T4600] rock: sig=0x5850, size=36, remaining=22 [ 105.882470][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.890082][ T4598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.899275][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.906513][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.939397][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.940518][ T4608] Bluetooth: MGMT ver 1.22 [ 105.968277][ T4608] Bluetooth: hci0: unsupported parameter 5135 [ 105.994292][ T4602] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.016086][ T4598] team0: Port device bridge0 added [ 106.041951][ T4608] Bluetooth: hci0: unsupported parameter 8192 [ 106.135599][ T4608] Bluetooth: hci0: unsupported parameter 5135 [ 106.164057][ T4608] Bluetooth: hci0: unsupported parameter 8192 [ 106.217983][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 106.487774][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 106.495659][ T128] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 106.533543][ T128] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 106.636639][ T4628] random: crng reseeded on system resumption [ 106.780087][ T4634] loop3: detected capacity change from 0 to 512 [ 106.877299][ T4625] fido_id[4625]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.900602][ T4634] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.83: missing EA_INODE flag [ 106.973457][ T4634] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.83: error while reading EA inode 12 err=-117 [ 107.004683][ T4634] EXT4-fs (loop3): 1 orphan inode deleted [ 107.013846][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 107.587375][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'. [ 107.628746][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 107.644176][ T4660] device bridge_slave_1 left promiscuous mode [ 107.650611][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.694205][ T4660] device bridge_slave_0 left promiscuous mode [ 107.712014][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.802052][ T4663] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 108.163808][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 108.200561][ T4676] loop1: detected capacity change from 0 to 2048 [ 108.289605][ T4676] loop1: p1 < > p4 [ 108.297612][ T4676] loop1: p4 size 8388608 extends beyond EOD, truncated [ 108.651600][ T4690] device syzkaller0 entered promiscuous mode [ 108.829326][ T4695] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 108.877084][ T4703] loop1: detected capacity change from 0 to 128 [ 108.929322][ T4703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.944909][ T4701] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 108.979234][ T4703] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.044178][ T4701] netlink: 'syz.3.104': attribute type 33 has an invalid length. [ 109.150486][ T4701] netlink: 152 bytes leftover after parsing attributes in process `syz.3.104'. [ 109.285714][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 109.370378][ T4701] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.513891][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 110.273509][ T4736] loop3: detected capacity change from 0 to 512 [ 110.360244][ T4736] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.380402][ T4736] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.453335][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 110.552207][ T4743] loop2: detected capacity change from 0 to 512 [ 110.633181][ T4743] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.118: bg 0: block 5: invalid block bitmap [ 110.665643][ T4743] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.711905][ T4751] mmap: syz.3.120 (4751) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.728970][ T4743] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.118: invalid indirect mapped block 3 (level 2) [ 110.744317][ T4743] EXT4-fs (loop2): 2 truncates cleaned up [ 110.750281][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 110.929904][ T4751] FAULT_INJECTION: forcing a failure. [ 110.929904][ T4751] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.929946][ T4751] CPU: 1 PID: 4751 Comm: syz.3.120 Not tainted syzkaller #0 [ 110.929970][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.929984][ T4751] Call Trace: [ 110.929991][ T4751] [ 110.930001][ T4751] dump_stack_lvl+0x188/0x24e [ 110.930037][ T4751] ? show_regs_print_info+0x12/0x12 [ 110.930065][ T4751] ? load_image+0x410/0x410 [ 110.930099][ T4751] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.930137][ T4751] should_fail_ex+0x390/0x4c0 [ 110.930173][ T4751] _copy_to_user+0x2c/0x130 [ 110.930201][ T4751] bpf_verifier_vlog+0x172/0x3a0 [ 110.930225][ T4751] verbose+0x1f0/0x2b0 [ 110.930251][ T4751] ? check_func_arg_reg_off+0x280/0x280 [ 110.930276][ T4751] ? _copy_to_user+0xa0/0x130 [ 110.930303][ T4751] ? copy_user_short_string+0x24/0x40 [ 110.930331][ T4751] print_verifier_state+0x2a9/0x2060 [ 110.930378][ T4751] ? mark_all_scalars_precise+0x9b0/0x9b0 [ 110.930426][ T4751] do_check_common+0x54ce/0xc560 [ 110.930498][ T4751] ? push_insn+0x670/0x670 [ 110.930520][ T4751] ? check_func_arg_reg_off+0x280/0x280 [ 110.930541][ T4751] ? print_verifier_state+0x2060/0x2060 [ 110.930564][ T4751] ? do_check_subprogs+0x313/0x360 [ 110.930594][ T4751] bpf_check+0x3eb5/0x11010 [ 110.930640][ T4751] ? mark_lock+0x94/0x320 [ 110.930672][ T4751] ? bpf_get_btf_vmlinux+0x10/0x10 [ 110.930693][ T4751] ? __lock_acquire+0x142d/0x7ea0 [ 110.930726][ T4751] ? mark_lock+0x94/0x320 [ 110.930759][ T4751] ? __lock_acquire+0x1359/0x7ea0 [ 110.930798][ T4751] ? mark_lock+0x94/0x320 [ 110.930831][ T4751] ? __lock_acquire+0x142d/0x7ea0 [ 110.930886][ T4751] ? verify_lock_unused+0x140/0x140 [ 110.930921][ T4751] ? verify_lock_unused+0x140/0x140 [ 110.930953][ T4751] ? verify_lock_unused+0x140/0x140 [ 110.930991][ T4751] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 110.931040][ T4751] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.931070][ T4751] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.931100][ T4751] ? lock_chain_count+0x20/0x20 [ 110.931134][ T4751] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 110.931163][ T4751] ? lockdep_hardirqs_on+0x94/0x140 [ 110.931193][ T4751] ? ktime_get_with_offset+0xff/0x320 [ 110.931218][ T4751] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 110.931246][ T4751] ? ktime_get_real_ts64+0x440/0x440 [ 110.931273][ T4751] ? do_raw_spin_unlock+0x11d/0x230 [ 110.931299][ T4751] ? __might_fault+0xc2/0x120 [ 110.931324][ T4751] ? memset+0x1e/0x40 [ 110.931346][ T4751] ? bpf_obj_name_cpy+0x190/0x1d0 [ 110.931377][ T4751] bpf_prog_load+0x100e/0x1530 [ 110.931425][ T4751] ? map_freeze+0x390/0x390 [ 110.931455][ T4751] ? __might_fault+0xa6/0x120 [ 110.931489][ T4751] ? __might_fault+0xa6/0x120 [ 110.931511][ T4751] ? __might_fault+0xc2/0x120 [ 110.931533][ T4751] ? __might_fault+0xa6/0x120 [ 110.931556][ T4751] ? bpf_lsm_bpf+0x5/0x10 [ 110.931580][ T4751] ? security_bpf+0x7a/0xa0 [ 110.931603][ T4751] __sys_bpf+0x5b8/0x780 [ 110.931636][ T4751] ? bpf_link_show_fdinfo+0x380/0x380 [ 110.931680][ T4751] ? lock_chain_count+0x20/0x20 [ 110.931718][ T4751] __x64_sys_bpf+0x78/0x90 [ 110.931748][ T4751] do_syscall_64+0x4c/0xa0 [ 110.931771][ T4751] ? clear_bhb_loop+0x60/0xb0 [ 110.931796][ T4751] ? clear_bhb_loop+0x60/0xb0 [ 110.931822][ T4751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.931845][ T4751] RIP: 0033:0x7f9a4e39e159 [ 110.931866][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.931884][ T4751] RSP: 002b:00007f9a4f355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.931910][ T4751] RAX: ffffffffffffffda RBX: 00007f9a4e625fa0 RCX: 00007f9a4e39e159 [ 110.931927][ T4751] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 110.931941][ T4751] RBP: 00007f9a4e43506b R08: 0000000000000000 R09: 0000000000000000 [ 110.931955][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.931968][ T4751] R13: 00007f9a4e626038 R14: 00007f9a4e625fa0 R15: 00007ffc0c948488 [ 110.931998][ T4751] [ 110.967110][ T4758] netlink: 'syz.4.122': attribute type 1 has an invalid length. [ 110.976719][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 111.107639][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 111.219182][ T4763] x_tables: duplicate underflow at hook 4 [ 111.328248][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 113.117760][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 113.117848][ T4794] device bridge_slave_1 left promiscuous mode [ 113.119001][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.141109][ T4794] device bridge_slave_0 left promiscuous mode [ 113.141380][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.349467][ T4794] team0: Port device bridge0 removed [ 114.729349][ T4817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 114.865070][ T4791] tty tty2: ldisc open failed (-12), clearing slot 1 [ 115.081829][ T4823] loop1: detected capacity change from 0 to 512 [ 115.279261][ T4823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.294125][ T4823] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.337935][ T4829] FAULT_INJECTION: forcing a failure. [ 115.337935][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 115.351748][ T4829] CPU: 0 PID: 4829 Comm: syz.3.142 Not tainted syzkaller #0 [ 115.359370][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.369598][ T4829] Call Trace: [ 115.372976][ T4829] [ 115.376219][ T4829] dump_stack_lvl+0x188/0x24e [ 115.381065][ T4829] ? show_regs_print_info+0x12/0x12 [ 115.386323][ T4829] ? load_image+0x410/0x410 [ 115.391173][ T4829] ? __might_sleep+0xd0/0xd0 [ 115.395795][ T4829] ? __lock_acquire+0x7ea0/0x7ea0 [ 115.400859][ T4829] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 115.407598][ T4829] should_fail_ex+0x390/0x4c0 [ 115.412361][ T4829] should_failslab+0x5/0x20 [ 115.416996][ T4829] slab_pre_alloc_hook+0x59/0x300 [ 115.422253][ T4829] ? percpu_ref_init+0xc0/0x340 [ 115.427191][ T4829] __kmem_cache_alloc_node+0x4f/0x270 [ 115.432626][ T4829] ? percpu_ref_init+0xc0/0x340 [ 115.437621][ T4829] ? blk_cgroup_congested+0x220/0x220 [ 115.443062][ T4829] kmalloc_trace+0x26/0xe0 [ 115.447546][ T4829] percpu_ref_init+0xc0/0x340 [ 115.452306][ T4829] blkg_alloc+0xfa/0x7d0 [ 115.456791][ T4829] blkcg_init_disk+0x24c/0x3f0 [ 115.461621][ T4829] ? blkcg_unpin_online+0x250/0x250 [ 115.466879][ T4829] ? __xa_insert+0x242/0x290 [ 115.471520][ T4829] ? do_raw_spin_unlock+0x11d/0x230 [ 115.476932][ T4829] __alloc_disk_node+0x2b3/0x570 [ 115.481918][ T4829] __blk_alloc_disk+0x2c/0x80 [ 115.486628][ T4829] dm_create+0x46b/0xf90 [ 115.490908][ T4829] dev_create+0x12e/0x2c0 [ 115.495291][ T4829] ? list_devices+0x820/0x820 [ 115.500006][ T4829] ? __might_fault+0xc2/0x120 [ 115.504718][ T4829] ? __might_fault+0xa6/0x120 [ 115.509457][ T4829] dm_ctl_ioctl+0xa9c/0xec0 [ 115.514036][ T4829] ? list_devices+0x820/0x820 [ 115.518766][ T4829] ? dm_poll+0x120/0x120 [ 115.523068][ T4829] ? bpf_lsm_file_ioctl+0x5/0x10 [ 115.528047][ T4829] ? security_file_ioctl+0x7c/0xa0 [ 115.533333][ T4829] ? dm_poll+0x120/0x120 [ 115.537726][ T4829] __se_sys_ioctl+0xfa/0x170 [ 115.542664][ T4829] do_syscall_64+0x4c/0xa0 [ 115.547157][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 115.551884][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 115.556872][ T4829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.563088][ T4829] RIP: 0033:0x7f9a4e39e159 [ 115.567555][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.587306][ T4829] RSP: 002b:00007f9a4f355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.595866][ T4829] RAX: ffffffffffffffda RBX: 00007f9a4e625fa0 RCX: 00007f9a4e39e159 [ 115.603892][ T4829] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 115.612169][ T4829] RBP: 00007f9a4e43506b R08: 0000000000000000 R09: 0000000000000000 [ 115.620289][ T4829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.628311][ T4829] R13: 00007f9a4e626038 R14: 00007f9a4e625fa0 R15: 00007ffc0c948488 [ 115.636353][ T4829] [ 115.639491][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.940737][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 116.157585][ T4842] FAULT_INJECTION: forcing a failure. [ 116.157585][ T4842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.283625][ T4842] CPU: 0 PID: 4842 Comm: syz.1.146 Not tainted syzkaller #0 [ 116.291123][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.301468][ T4842] Call Trace: [ 116.304800][ T4842] [ 116.307795][ T4842] dump_stack_lvl+0x188/0x24e [ 116.312579][ T4842] ? show_regs_print_info+0x12/0x12 [ 116.317882][ T4842] ? load_image+0x410/0x410 [ 116.322487][ T4842] ? __lock_acquire+0x7ea0/0x7ea0 [ 116.327592][ T4842] ? do_futex+0x310/0x320 [ 116.331998][ T4842] should_fail_ex+0x390/0x4c0 [ 116.336941][ T4842] strncpy_from_user+0x32/0x340 [ 116.341903][ T4842] __se_sys_add_key+0xd8/0x410 [ 116.346839][ T4842] ? __x64_sys_add_key+0xc0/0xc0 [ 116.352361][ T4842] ? lockdep_hardirqs_on+0x94/0x140 [ 116.357988][ T4842] ? __x64_sys_add_key+0x1c/0xc0 [ 116.363003][ T4842] do_syscall_64+0x4c/0xa0 [ 116.367493][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 116.372418][ T4842] ? clear_bhb_loop+0x60/0xb0 [ 116.377344][ T4842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.383843][ T4842] RIP: 0033:0x7f11d419e159 [ 116.388582][ T4842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.409492][ T4842] RSP: 002b:00007f11d5030028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 116.418070][ T4842] RAX: ffffffffffffffda RBX: 00007f11d4425fa0 RCX: 00007f11d419e159 [ 116.426196][ T4842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 116.434339][ T4842] RBP: 00007f11d423506b R08: ffffffffffffffff R09: 0000000000000000 [ 116.442985][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.451040][ T4842] R13: 00007f11d4426038 R14: 00007f11d4425fa0 R15: 00007ffecb3bc3e8 [ 116.459127][ T4842] [ 117.031750][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.064563][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 117.073518][ T4861] device bridge_slave_1 left promiscuous mode [ 117.085783][ T4862] netlink: 7 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.111593][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.122438][ T4862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.143880][ T4861] device bridge_slave_0 left promiscuous mode [ 117.154631][ T4862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 117.175760][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.185900][ T4868] loop4: detected capacity change from 0 to 764 [ 117.243676][ T4868] rock: directory entry would overflow storage [ 117.270467][ T4868] rock: sig=0x5850, size=36, remaining=22 [ 117.915162][ T4890] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 117.985620][ T4884] IPVS: Scheduler module ip_vs_mh not found [ 118.007527][ T4890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.156705][ T4894] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 118.214237][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.390414][ T4903] netlink: 'syz.1.166': attribute type 3 has an invalid length. [ 118.841630][ T4909] loop3: detected capacity change from 0 to 764 [ 118.949433][ T4909] rock: directory entry would overflow storage [ 119.067518][ T4909] rock: sig=0x5850, size=36, remaining=22 [ 120.172022][ T4929] device ip6gretap0 entered promiscuous mode [ 121.720703][ T4939] loop4: detected capacity change from 0 to 128 [ 121.814359][ T4950] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 122.053748][ T4955] loop1: detected capacity change from 0 to 512 [ 122.080867][ T4950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.197048][ T4955] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 122.214060][ T4955] FAT-fs (loop1): Filesystem has been set read-only [ 122.267743][ T4953] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 122.305308][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.815297][ T4977] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 122.843133][ T4973] loop3: detected capacity change from 0 to 1024 [ 122.870096][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 122.903845][ T4977] FAULT_INJECTION: forcing a failure. [ 122.903845][ T4977] name fail_futex, interval 1, probability 0, space 0, times 1 [ 122.918691][ T4973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.938599][ T4977] CPU: 1 PID: 4977 Comm: syz.4.185 Not tainted syzkaller #0 [ 122.945996][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.956201][ T4977] Call Trace: [ 122.959537][ T4977] [ 122.962523][ T4977] dump_stack_lvl+0x188/0x24e [ 122.967363][ T4977] ? show_regs_print_info+0x12/0x12 [ 122.972650][ T4977] ? load_image+0x410/0x410 [ 122.977224][ T4977] ? ____sys_sendmsg+0x805/0x9a0 [ 122.982310][ T4977] ? __sys_sendmsg_sock+0x30/0x30 [ 122.987392][ T4977] should_fail_ex+0x390/0x4c0 [ 122.992340][ T4977] get_futex_key+0x1b1/0x1000 [ 122.997105][ T4977] ? rcu_is_watching+0x11/0xa0 [ 123.001934][ T4977] ? ___sys_sendmsg+0x2b2/0x360 [ 123.006832][ T4977] ? futex_setup_timer+0xc0/0xc0 [ 123.011798][ T4977] ? __sys_sendmsg+0x2a0/0x2a0 [ 123.016629][ T4977] futex_wake+0x123/0x4f0 [ 123.021054][ T4977] ? futex_wake_mark+0x150/0x150 [ 123.026101][ T4977] do_futex+0x2e2/0x320 [ 123.030302][ T4977] ? __ia32_sys_get_robust_list+0x100/0x100 [ 123.036240][ T4977] ? fput+0x150/0x1a0 [ 123.040274][ T4977] __se_sys_futex+0x381/0x410 [ 123.045013][ T4977] ? __x64_sys_futex+0xf0/0xf0 [ 123.049845][ T4977] ? __x64_sys_futex+0x1d/0xf0 [ 123.054843][ T4977] do_syscall_64+0x4c/0xa0 [ 123.059312][ T4977] ? clear_bhb_loop+0x60/0xb0 [ 123.064575][ T4977] ? clear_bhb_loop+0x60/0xb0 [ 123.069411][ T4977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.075615][ T4977] RIP: 0033:0x7f53e479e159 [ 123.080161][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.099904][ T4977] RSP: 002b:00007f53e569c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.108456][ T4977] RAX: ffffffffffffffda RBX: 00007f53e4a25fa8 RCX: 00007f53e479e159 [ 123.116486][ T4977] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f53e4a25fac [ 123.124490][ T4977] RBP: 00007f53e4a25fa0 R08: 00320ebf7a67bdf4 R09: 0000000000000000 [ 123.132514][ T4977] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000 [ 123.140518][ T4977] R13: 00007f53e4a26038 R14: 00007ffd8080b300 R15: 00007ffd8080b3e8 [ 123.148537][ T4977] [ 123.235827][ T4973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.407928][ T4992] Bluetooth: hci0: unsupported parameter 5135 [ 123.421495][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 123.443989][ T4992] Bluetooth: hci0: unsupported parameter 8192 [ 123.471594][ T4992] Bluetooth: hci0: unsupported parameter 5135 [ 123.488945][ T4994] FAULT_INJECTION: forcing a failure. [ 123.488945][ T4994] name failslab, interval 1, probability 0, space 0, times 0 [ 123.535270][ T4992] Bluetooth: hci0: unsupported parameter 8192 [ 123.593549][ T4994] CPU: 0 PID: 4994 Comm: syz.1.191 Not tainted syzkaller #0 [ 123.601049][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.611169][ T4994] Call Trace: [ 123.614493][ T4994] [ 123.617470][ T4994] dump_stack_lvl+0x188/0x24e [ 123.622209][ T4994] ? show_regs_print_info+0x12/0x12 [ 123.627594][ T4994] ? load_image+0x410/0x410 [ 123.632166][ T4994] ? __might_sleep+0xd0/0xd0 [ 123.636907][ T4994] ? __lock_acquire+0x7ea0/0x7ea0 [ 123.641996][ T4994] should_fail_ex+0x390/0x4c0 [ 123.646760][ T4994] should_failslab+0x5/0x20 [ 123.651588][ T4994] slab_pre_alloc_hook+0x59/0x300 [ 123.657127][ T4994] kmem_cache_alloc+0x56/0x2f0 [ 123.661962][ T4994] ? posix_lock_inode+0x365/0x32f0 [ 123.667185][ T4994] posix_lock_inode+0x365/0x32f0 [ 123.672383][ T4994] ? aa_path_link+0x8a0/0x8a0 [ 123.677138][ T4994] ? lockdep_softirqs_off+0x430/0x430 [ 123.682675][ T4994] ? __kasan_slab_alloc+0x6b/0x80 [ 123.687991][ T4994] ? posix_lock_file+0x50/0x50 [ 123.692824][ T4994] ? bpf_lsm_file_lock+0x5/0x10 [ 123.697746][ T4994] fcntl_setlk+0xaa7/0x10e0 [ 123.702313][ T4994] ? vfs_lock_file+0xd0/0xd0 [ 123.706972][ T4994] ? __might_fault+0xa6/0x120 [ 123.711718][ T4994] ? __might_fault+0xc2/0x120 [ 123.716439][ T4994] ? __might_fault+0xa6/0x120 [ 123.721336][ T4994] do_fcntl+0x543/0x1280 [ 123.725641][ T4994] ? __ia32_sys_get_robust_list+0x100/0x100 [ 123.731678][ T4994] ? kill_fasync+0x4b0/0x4b0 [ 123.736314][ T4994] ? __fget_files+0x28/0x460 [ 123.741034][ T4994] ? __fget_files+0x3fc/0x460 [ 123.745752][ T4994] ? tomoyo_file_fcntl+0x74/0x210 [ 123.750950][ T4994] ? bpf_lsm_file_fcntl+0x5/0x10 [ 123.756022][ T4994] ? security_file_fcntl+0x7c/0xa0 [ 123.761171][ T4994] __se_sys_fcntl+0xc9/0x190 [ 123.765811][ T4994] do_syscall_64+0x4c/0xa0 [ 123.770298][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 123.775041][ T4994] ? clear_bhb_loop+0x60/0xb0 [ 123.779779][ T4994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.785722][ T4994] RIP: 0033:0x7f11d419e159 [ 123.790176][ T4994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.810436][ T4994] RSP: 002b:00007f11d5030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 123.818927][ T4994] RAX: ffffffffffffffda RBX: 00007f11d4425fa0 RCX: 00007f11d419e159 [ 123.826960][ T4994] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 123.834991][ T4994] RBP: 00007f11d423506b R08: 0000000000000000 R09: 0000000000000000 [ 123.843194][ T4994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.851375][ T4994] R13: 00007f11d4426038 R14: 00007f11d4425fa0 R15: 00007ffecb3bc3e8 [ 123.859503][ T4994] [ 124.059582][ T5005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 124.172715][ T5010] loop3: detected capacity change from 0 to 512 [ 124.182889][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 124.233260][ T5013] device bridge_slave_1 left promiscuous mode [ 124.294951][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.313006][ T5013] device bridge_slave_0 left promiscuous mode [ 124.345153][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.358240][ T5010] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 124.394096][ T5010] FAT-fs (loop3): Filesystem has been set read-only [ 124.702702][ T5030] loop3: detected capacity change from 0 to 2048 [ 124.783415][ T5030] Alternate GPT is invalid, using primary GPT. [ 124.806531][ T5030] loop3: p1 p2 p3 [ 124.834085][ T5030] loop3: partition table partially beyond EOD, truncated [ 125.088656][ T11] [ 125.091070][ T11] ============================================ [ 125.097261][ T11] WARNING: possible recursive locking detected [ 125.103475][ T11] syzkaller #0 Not tainted [ 125.107924][ T11] -------------------------------------------- [ 125.114113][ T11] kworker/u4:1/11 is trying to acquire lock: [ 125.120170][ T11] ffff8880786679e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15c/0x550 [ 125.129366][ T11] [ 125.129366][ T11] but task is already holding lock: [ 125.136765][ T11] ffff8880786669e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 125.145975][ T11] [ 125.145975][ T11] other info that might help us debug this: [ 125.154157][ T11] Possible unsafe locking scenario: [ 125.154157][ T11] [ 125.161646][ T11] CPU0 [ 125.164962][ T11] ---- [ 125.168305][ T11] lock(rlock-AF_UNIX); [ 125.172608][ T11] lock(rlock-AF_UNIX); [ 125.176917][ T11] [ 125.176917][ T11] *** DEADLOCK *** [ 125.176917][ T11] [ 125.185117][ T11] May be due to missing lock nesting notation [ 125.185117][ T11] [ 125.193489][ T11] 4 locks held by kworker/u4:1/11: [ 125.198747][ T11] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 125.210241][ T11] #1: ffffc90000107d00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 125.220060][ T11] #2: ffffffff8de57c58 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xcb/0x1100 [ 125.229006][ T11] #3: ffff8880786669e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 125.238564][ T11] [ 125.238564][ T11] stack backtrace: [ 125.244502][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 125.251914][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.262024][ T11] Workqueue: events_unbound __unix_gc [ 125.267463][ T11] Call Trace: [ 125.270785][ T11] [ 125.273752][ T11] dump_stack_lvl+0x188/0x24e [ 125.278567][ T11] ? show_regs_print_info+0x12/0x12 [ 125.283821][ T11] ? print_deadlock_bug+0x435/0x5d0 [ 125.289072][ T11] __lock_acquire+0x690e/0x7ea0 [ 125.294027][ T11] ? verify_lock_unused+0x140/0x140 [ 125.299297][ T11] ? verify_lock_unused+0x140/0x140 [ 125.304678][ T11] lock_acquire+0x1bc/0x4a0 [ 125.309243][ T11] ? unix_collect_skb+0x15c/0x550 [ 125.314322][ T11] ? read_lock_is_recursive+0x10/0x10 [ 125.319756][ T11] ? do_raw_spin_lock+0x128/0x2f0 [ 125.324842][ T11] ? __rwlock_init+0x140/0x140 [ 125.329667][ T11] ? unix_scc_dead+0x689/0x6f0 [ 125.334567][ T11] _raw_spin_lock+0x2a/0x40 [ 125.339134][ T11] ? unix_collect_skb+0x15c/0x550 [ 125.344202][ T11] unix_collect_skb+0x15c/0x550 [ 125.349119][ T11] __unix_gc+0x868/0x1100 [ 125.353519][ T11] ? wait_for_unix_gc+0x190/0x190 [ 125.358609][ T11] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.364742][ T11] ? _raw_spin_unlock_irq+0x1f/0x40 [ 125.370023][ T11] ? process_one_work+0x7b4/0x1160 [ 125.375187][ T11] process_one_work+0x8ab/0x1160 [ 125.380195][ T11] ? worker_detach_from_pool+0x240/0x240 [ 125.385883][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.390968][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 125.396672][ T11] ? wq_worker_running+0x97/0x190 [ 125.401847][ T11] worker_thread+0xaf5/0x12a0 [ 125.406709][ T11] kthread+0x29d/0x330 [ 125.410826][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 125.415931][ T11] ? kthread_blkcg+0xd0/0xd0 [ 125.420650][ T11] ret_from_fork+0x1f/0x30 [ 125.425323][ T11] [ 126.572893][ T4274] Bluetooth: hci4: link tx timeout [ 126.578360][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.616124][ T4274] Bluetooth: hci4: link tx timeout [ 126.621697][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.914715][ T4274] Bluetooth: hci4: link tx timeout [ 126.920188][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.954338][ T4274] Bluetooth: hci4: link tx timeout [ 126.959680][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.498207][ T4274] Bluetooth: hci4: link tx timeout [ 127.503544][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.535982][ T4274] Bluetooth: hci4: link tx timeout [ 128.541197][ T4274] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.614041][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 129.011338][ T4279] Bluetooth: hci4: link tx timeout [ 129.016653][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.494956][ T4279] Bluetooth: hci4: link tx timeout [ 129.500173][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.207132][ T4279] Bluetooth: hci4: link tx timeout [ 131.212443][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.911835][ T4279] Bluetooth: hci4: link tx timeout [ 131.917357][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.012822][ T4279] Bluetooth: hci4: link tx timeout [ 133.018153][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.026543][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033679][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.555181][ T4279] Bluetooth: hci4: link tx timeout [ 133.560382][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.940741][ T4279] Bluetooth: hci4: link tx timeout [ 134.946120][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa